Network Security

i am having 1 5520 with csc-ssm module. can p2p aaplications, url filtering be restriected by this? if so please help me with config.

I am trying t establish a passive ftp connection using auth ssl. The only way I get it work currently is to allow all incoming ports from the destination host to my 1 client. Is there another way to configure the pix so I do not have to open up all t...

Hi-I have a small project where I would like to install an ASA 5505 with the base license to be the head-end for 6 - 8 remote access VPN clients. The inside interface would connect to a 200+ node LAN that is behind a router. The inside network will n...

HiIn Pix 7.0 vpn configuration and when I place show crypto isakmp sa then any output comein QM_ideal state.so what is QM_ideal State ??Thanks

We have a Network on MPLS backbone with dual service provider.There are 50 spoke location.DC and DR locationTopology is hub and spoke with all sites accessing data hosted at primary DC.ALso in case of disaster all the spoke sites will connect to DR s...

I just got a asa5520 to replace my current firewall. I am having problems getting it even to work .I can 't get any traffic to pass through outbound or inbound even with the basic configs....am I missing something with this device??

I'm trying to set up a LAN-2-LAN VPN connection between two VPN 3000 concentrators...the problem is one of the sides has a dynamic IP. Is there a way to get it setup with one side using static IP and the other side using Dynamic?Thanks

Hi all,I am facing a problem trying to establish a tunnel with one of our supplier.Their side is terminated on a IOS router currently unknown type and version (should be 12.2 - 12.4), my side is an ASA 7.2(2), configurations are attached (at least th...

Hi,I'm not even sure how to title this conversation, but here goes. We have a hub and spoke VPN setup with a 515E as the headend. There are PIX 501s at the remote locations. I have several remote site connecting to the PIX server, but not to each rem...

I just bought an ASA 5505 to use at home. I'm replacing an old Linksys Cable/DSL router. I'm having some trouble configuring it to forward DNS queries from internal machines to the DNS server at the ISP. The ASA's outside interface is connected to a ...

Occasionally, the users are able to establish connection without problems however more often then not they run into issues when attempting to access resources on the network. The tunnel is established but when they attempt to check e-mail, browser an...

Hi In the pix ver 7.0, what is difference logging history debugging from logging history warning for MRTG monitoring pix?(logging history debugging makes pix cpu higher 20% than warning)Thanksben

I've been told that when you implement Cisco NAC and are using non-Cisco IP phones, the device will authenticate the phone but not the pc plugged into it. Is this true or was it true and if so, is there a fix or a workaround? Nortel has been using th...

We are currently running CSA ver. 5.1.0.79.We see the message: "The process 'C:\WINDOWS\System32\svchost.exe' (as user NT AUTHORITY\SYSTEM) attempted to accept a connection as a server on UDP port 123 from (Internal IP Address) The operation was deni...